Full LottieFiles GraphQL access is intentional. It supports the capabilities that the connected account has. It does not grant extra scopes. Read the contract reference before a tool call.
- Discover the needed schema and capability first. Use only fields that the current public schema confirms.
- Read before a change. Inspect the target resource and its ownership or current state.
- Request the minimum fields. Send values as variables. Do not put secrets in a query.
- Paginate lists. Use the returned cursor and a user-approved limit.
- Before a mutation or delete, state the target and effect. Require explicit user intent and host confirmation.
- Inspect the response after a mutation. Handle GraphQL partial errors and report which data is reliable.
Never bypass scopes. Never log tokens or query variables. Do not infer a field or mutation name from a human label.